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A group theoretic framework is introduced that simplifies 
the description of known quantum error-correcting codes and 
greatly facilitates the construction of new examples. Codes 
are given which map 3 qubits to 8 qubits correcting 1 error, 
4 to 10 qubits correcting 1 error, 1 to 13 qubits correcting 2 
errors, and 1 to 29 qubits correcting 5 errors. 
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tary abehan (hence a binary vector space). Let V denote 
the vector space (where Z2 = {0, 1}) and label the 
standard basis of by w £ V. Every element e of 
E can be written uniquely in the form 



e = X{a)Z{b){-iy 



(1) 



where A e Z2, X{a) : \v) ^ \v + a), Z{b) : \v} 
(-l)*-^|w), for a,beV. 

Consider the jth qubit in a quantum channel which 
transmits n qubits. Let Vj be the vector with a 1 in 
the jth bit and O's in the remaining bits. Then X(vj) 
is the transformation which applies the Pauli matrix 
'^x = {1 0) the jth qubit and does nothing to the 
remaining n~l qubits. The transformation Z{vj) applies 
the Pauli matrix <Tz = {q -i) to the jth bit and does 
nothing to the other rt — 1 qubits. In the language of 
quantum error correction, X{vj) is a bit error and Z{vj) 
is a phase error in the jth qubit. The element X(a)Z{b) 
corresponds to bit errors in the qubits for which aj = 1 
and phase errors in the qubits for which bj ^ I. 

Observe that E is the group of tensor products ±wi (g) 
. . . (g) Wn where each wj is one of ax, ctz or ay — axaz- 
For the purposes of quantum error correction, we need 
16 1, rather than on combinatorial recipes for con- consider only errors of the types ax, az, and ay, since 

if we can correct these errors we can correct arbitrary 
errors |,|,[2|. 

Define a quadratic form Q an E = E/:i{E) by 



A quantum error-correcting code is a way of encoding 
quantum states into qubits (two-state quantum systems) 
so that error or decoherence in a small number of indi- 
vidual qubits has little or no effect on the encoded data. 
The existence of quantum error-correcting codes was dis- 
covered only recently [||. These codes have the poten- 
tial to be important for quantum computing and quan- 
tum communication; for example, they could be used 
as repeaters for quantum cryptography. Although the 
subject of quantum error-correcting codes is relatively 
new, a large number of papers have already appeared. 
Many of these describe specific examples of codes [0-0 . 
However, the theoretical aspects of these papers have 
been concentrated on properties and rates of the codes 
T2I 



structing them. This letter introduces a unifying frame- 
work which explains the codes discovered to date and 
greatly facilitates the construction of new examples. 

The basis for this unifying framework is group theo- 
retic. It rests on the structure of certain subgroups of 
0(2") and U(2") called Clifford groups 0. We first 
construct a subgroup E of 0(2"). This group E is an ex- 
traspecial 2-group, and provides a bridge between quan- 
tum error-correcting codes in Hilbert space and binary 
orthogonal geometry. We obtain the Clifford groups by 
taking the normalizer L oi E in 0(2") or the normal- 
izer L' of the group E' generated by E and il in U(2"). 
Since the natural setting for quantum mechanics is com- 
plex space, it might appear more appropriate to focus 
on the complex group L' . However, we shall begin by 
discussing the real Clifford group L, since its structure 
is easier to understand, and L is all that is required for 
the construction of the known quantum error-correcting 
codes. 

The Group Theoretic Framework. The extraspecial 2- 
group E is realized as an irreducible group of 2^"*"^" or- 
thogonal 2" X 2" matrices. The center S(£') is {±/} and 
the extraspecial property is that E — E/E{E) is elemen- 
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A, 



(2) 



where e ~ ±X{a)Z{b) is any element of E whose image 
in E is e. Then = (-/)Q(e) and Q{e) = or 1 ac- 
cording as X{a) and Z(b) commute or anticommute. If 
e = wi IS) ■ ■ ■ ® Wn then Q{e) is the parity of the number 
of components Wj that are equal to axaz- 

The normalizer L of ii^ in the real orthogonal group 
0(M^ ) (the subgroup of elements g such that g^^Eg = 
E) acts on E by conjugation, fixing the center S(i?) 
{g G L acts on E as the permutation e g~^eg). Hence 
there is a well-defined action of L on the binary vec- 
tor space E that preserves the quadratic form Q. The 
quotient L/E is the orthogonal group 0"'"(2n, 2), a fi- 
nite classical group jl^ . The group L appears in recent 
connections between classical Kerdock error-correcting 
codes, orthogonal geometry, and extremal Euclidean line 
sets [0. This group also appears ^ as the group of 
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Bell-state-preserving bilateral local transformations that 
two experimenters (A and B) can jointly perform on n 
pairs of particles (each pair being in a Bell state). Hence 
there is a one-to-one correspondence between Bell states 
and elements of E (cf. Eqs. (39) and (67) of [|). The 
quadratic form Q{e) is or 1 according as the Bell states 
are symmetric or antisymmetric under interchange of A 
and B. Observe that symmetry/ antisymmetry of Bell 
states is the physical invariant conserved by this presen- 
tation of L. 

The following are group elements that generate L, 
shown together with their induced action on the binary 
vector space E. 

(1) H = 2-"/2[(„i)"-f]^_^g^^ which interchanges X{b) 
and Z{b). 

(2) Every matrix A in the general linear group GL{V) 
determines a permutation matrix \v) — > \vA) in 0(M^ ). 
The action on E induced by conjugation is X{a) 
X{aA), Z{b) Z{bA~''^). For example the quantum 
XOR taking | (71(72) ^ 1 91 (91 © 92)) is represented by 



(010216162) (010216162) 



/I 






\0 



0\ 






1/ 



(3) 



The back action of the XOR on the phases is evident in 
its effect on 61 and 62. Any orthogonal matrix in 0(E^ ) 
that normalizes both XiV) and Z{V) is of this type for 
some A [0 Lemma 3.14]. 

(3) H2 = ( 1 -1 ) "8) ^2"-!; which applies a 7r/2 
rotation to the first qubit and leaves the other qubits 
unchanged. This acts on E by interchanging ai and 61. 

(4) Diagonal matrices cIm = diag[(— 1)'^*'^^^], where 
Qm is a binary quadratic form on V for which the as- 
sociated bilinear form Qm{u v) — Qm{u) — Qm{v) is 
uMv^ . Note that M is symmetric with zero diagonal. 
The induced action on E is given by 



(a|6) ^ (a|6) 













(4) 



These matrices are precisely the elements of L that in- 
duce the identity on the subgroup Z{V). In terms of 
their effect on qubits, these are the transformations in L 
that change the phases of the qubits while fixing their 
values. 

Remark. The group L' is the normalizer of the group 
E' generated by E and il in the unitary group U(2"). 
Now we cannot define Q(e) — because («e)^ ^ e^. 
However, we still have the nonsingular alternating binary 
form 



{X{a)Z{b),X{a')Z{b')) =a-b' + a' -b. 



(5) 



The group L' is generated by L and by diagonal trans- 
formations dp = diag[i^^'^"^] where Tp is a Z4-valued 



quadratic form ||T^, Section 4]. The induced action on 
E' = E'/E{E') is described by 



(a|6) ^ (a|6) 













(6) 



where P is symmetric and may have a nonzero diagonal. 
For example, applying the transformation ( ? ) to 
each qubit corresponds to P ^ I. The quotient L' / E' is 
the symplectic group Sp(2n, 2) [ p^ . 

Quantum Error- Correcting Codes. A subspace S of 
E is said to be totally singular if Q{s) = for all s ^ S. 
It follows that for s — (a|6), s' — (a'|6') in S the inner 
product (s, s') = Q{s + s') — Q{s) — Q{s') satisfies 



(s, s')=a-b' + a' ■b = 0. 



(7) 



The group L acts transitively on totally singular sub- 
spaces of a given dimension. Hence every fc-dimensional 
totally singular subspace is contained in the same number 
of maximal (n-dimensional) totally singular subspaces. If 
M is a maximal totally singular subspace, then the group 
M has 2" distinct linear characters, and the correspond- 
ing eigenspaces determine a coordinate frame T{M) (an 
orthonormal basis of ). For example, the image of 
Z{V) in E determines the coordinate frame \v), v G V, 
and the image of X{V) determines the coordinate frame 
2-"/2 ueV. If 5 C M is a fc-dimensional 

totally singular subspace, then the group S has 2*^ dis- 
tinct linear characters. The 2" vectors in T{M) are parti- 
tioned into 2^ sets of size 2""*^ with each set correspond- 
ing to a different eigenspace. We view each eigenspace 
as a quantum error-correcting code which maps n — k 
qubits into n qubits. The 2""'^ vectors from J-{M) in 
that eigenspace constitute the codewords. 

More generally, we may use complex space, and so we 
define a quantum error-correcting code encoding fc qubits 
into n qubits to be any 2*''-dimensional subspace C of . 
This code will protect against errors in a certain error set 

which we take to be a subset of the extraspecial group 
E. As remarked earlier, there is no loss of generality in 
restricting to error sets in E. 

For such a code C to protect against all errors in an 
error set £, it is necessary and sufficient |||,|l^ that for 
any two vectors |ci) and |c2) in C with (ci|c2) = 0, and 
any two transformations ei and 62 from we have 



(ci|e^ ^e2|c2) = 0, 
(ci|ej"^e2|ci) = (c2|ej;^e2|c2). 



(8) 
(9) 



Note that since we are assuming that £ is contained in 
E, we can replace 61^62 by 6162 in the above equations, 
since ei ~ ±e^^. An interesting special case occurs 
when both sides of Eq. (|^) are always equal to for 
ei ^ 62 G £. This implies that there is a measurement 
which will uniquely determine the error without affecting 
the encoded subspace. After this measurement, the error 
can subsequently be corrected by a unitary operation. 
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If both sides of Eq. ^ are not always 0, then there can 
be two errors ei and 62 between which it is impossible to 
distinguish. However, these two errors are guaranteed to 
have identical effects on vectors within the subspace C, 
and so it is not necessary to distinguish between these 
errors in order to correct the error. 

We now can show the connection between orthogonal 
geometry and quantum error correcting codes. 

Theorem 1. Suppose that is a fc-dimensional to- 
tally singular subspace of E. Let be the (2n — fc)- 
dimensional subspace orthogonal to S with respect to 
the inner product (^. Further suppose that for any two 
vectors ei and 62 in an error set £ C E, either 6162 G S 
or 6162 ^ S-^. Then the eigenspace C corresponding to 
any character of the group S is an error-correcting code 
which will correct any error e £ £. 

Proof. We first show that if e £ i?, then e permutes 
the 2*^ spaces Ci which are generated by the 2'^ differ- 
ent linear characters of S. Consider an element s € S 
with eigenvalue Ag. We write s for the associated repre- 
sentation. Then for any |c) G C we have s\c) — Xs\c), 
and se|c) = {—lY^''^^es\c) = (— l)'^"''^' A^elc), where (s, e) 
is the inner product (|^). Since (— l)^*''^^As is indepen- 
dent of c, this shows that the action of e permutes the 
eigenspaces generated by the characters of S. 

We will divide the proof into two cases, according as 
6162 £ 5 or 6162 ^ S^. 

Case 1. Suppose 6162 e S. It follows that for |ci) and 

|C2) e C with (C1|C2) = 0, 



0, 



(Ci|eie2|c2) = Aeie2(ci|c2 

and for all |c) G C, 

(c|eie2|c} = Aeie2(c|c) = Aeie2, 



(10) 



(11) 



establishing Eqs. (||) and (^. 

Case 2. Suppose 6162 ^ . It follows that for some 
s £ S, seie2 — —61628. Thus, for |c) G C, sei62\c) = 
— eie2s|c) = — Aseie2|c), so eie2|c} ^ C. Thus eie2|c) is 
in a different eigenspace, so 



(ci|eie2|c2) = 



(12) 



for all ci, C2 G C (including ci — C2). Again Eqs. (||) and 
(|) hold. □ 

The quadratic form Q plays no role in this proof and 
it is only necessary that S satisfy (S", S) = Q with respect 
to the alternating form. This means the complex group 
L' can also be used for code construction. 

The group L acts transitively on the totally singular 
subspaces S of dimension k, so there is some element 
g G L taking any particular fc-dimensional totally singu- 
lar subspace to the subspace corresponding to a quantum 
code generated as in Theorem 1. This implies that some g 
takes the canonical 2"~'^-dimensional Hilbert space gen- 
erated by the first n — k qubits to the encoded subspace. 



Since L can be generated by XOR's and n/2 rotations, 
these quantum gates are therefore sufficient for encoding 
any of these quantum codes. 

Example 1. We first describe the code mapping 1 
qubit into 5 qubits presented in Ref. |9|, which contains 
two codewords, 



co) = 


100000) 










+ 


11000) + 


101100) + 


100110) + 


100011) + 


llOOOl) 




llOlOO) - 


101010) - 


100101) - 


llOOlO) - 


101001) 




IllllO) - 


101111) - 


llOlll) - 


IllOll) - 


IlllOl) 


ci) = 


llllll) 










+ 


100111) -f 


llOOll) -1- 


111001) -1- 


111100) -1- 


101110) 




101011) - 


lioioi) - 


111010) - 


101101) - 


110110) 




100001) - 


1 10000) - 


101000) - 


100100) - 


100010) 



Essentially the same code is given in Ref. |^ , but we use 
the above presentation since it is fixed under cyclic per- 
mutations. It is easily verified that X(11000)Z(00101) 
fixes |co) and |ci). Thus we may take the vector 
(11000|00101) G to be in the subspace S. Using the 
fact that the code is closed under cyclic permutations, we 
find that is a 4-dimensional totally singular subspace 
generated by the vectors 



11000 
01100 
00110 
00011 



00101 
10010 
01001 
10100 



(13) 



[The fifth cyclic shift, (10001|01010), is also in this sub- 
space.] The dual S-^ is generated by S and the additional 
vectors (11111|00000) and (00000|11111). It is straight- 
forward to verify that the minimal weight vectors in 
have weight three [one such vector is (00111 [00101)] and 
thus the code can correct one error. 

Example 2. Suppose we have a classical linear [n, fc, d] 
binary error correcting code C (i.e., it is over , it is fc- 
dimensional, and it has minimal distance d, so that it 
corrects t = [{d — l)/2] errors). Suppose furthermore 
that C C. We can define a subspace S to consist of 
all vectors {vi\v2) G E, where V2 G C^. The dual 
consists of all vectors (wi|w2) with vi, V2 G C, showing 
that the corresponding quantum error-correcting code 
corrects t errors. The subspace S is 2(n — fc)-dimensional, 
so the quantum code maps n — 2k qubits into n qubits. 
This is the method described in Refs. 

Example 3. Consider the subspace S obtained by 
modifying the classical [8,4,4] Hamming code as follows: 



01110100 
00111010 
00011101 
11111111 
00000000 



00111010 
00011101 
01001110 
00000000 

11111111. 



(14) 
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It is straightforward to verify that these vectors generate 
a 5-dimensional totally singular subspace S which is in- 
variant under cyclic permutations of the last 7 bits, and 
that S'^ has minimal weight 3. This gives a quantum 
code mapping 3 qubits into 8 qubits which can correct 
one error. The same code was discovered by Gottesman 
[ pl| , also via group-theoretic techniques. 

Example 4- By duplicating the 5-qubit code (|l^) and 
adding two vectors, we can obtain a code which maps 4 
qubits into 10 qubits and corrects one error: 



01100 11110 
00110 01111 
00011 10111 
10001 11011 

11111 11111 

00000 00000 



10010 01100 

01001 00110 

10100 00011 

01010 10001 

00000 00000 

11111 11111. 



(15) 



Example 5. The following construction is a gener- 
alization of the 5-qubit code ( p^ ) inspired by classical 
quadratic residue codes. It works for any prime p of 
the form 8j -I- 5. We have not found good theoretical 
bounds on the minimal distance, but for small primes 
these codes are excellent. To construct the first vector 
(a 15), put aj = 1 when j is a nonzero quadratic residue 
mod p (that is, j — mod p for some k) and put bj ^ 1 
when j is a quadratic nonresidue. To obtain p—1 vectors 
that generate the subspace S, take p — 2 cyclic shifts of 
the first vector. For p — 13, the first basis vector is 

0101100001101|0010011110010 

and the remaining vectors are obtained by cyclic shifts. 
The minimal weight of S'^ was calculated by computer 
to be 5. This gives a code mapping one qubit into 13 
qubits which corrects 2 errors. For p = 29, ths subspace 
S-^ has minimal distance 11, so this construction gives a 
code mapping 1 qubit to 29 which corrects 5 errors. 

We next give a Gilbert- Varshamov lower bound for 
the asymptotic rate of this class of codes. It matches 
the Gilbert- Varshamov lower bounds known for general 
quantum error-correcting codes . 

Theorem 2. There exist quantum error-correcting 
codes with asymptotic rate 



R=l- 2^1og2 3 - H2{2S) 



where S is the fraction of qubits that are subject to de- 
coherence and H2{S) = — (51og2 S — (1 — S) log2(l — S) is 
the binary entropy function. 

Proof. Let Nk denote the number of fc-dimensional 
totally singular subspaces. We count pairs (e, S) where 
e G E isin S'^ {i.e., e = 6162 with ei, 62 in the error set £) 
and is a fc-dimensional totally singular subspace with 
e £ S^\S. Transitivity of L on singular points (e ^ 0, 
Q{e) — 0), and on nonsingular points (Q(e) ^ 0) implies 
that each e G E satisfies e G S-^\S for iiN/^ subspaces 



S, where the fraction /x « 2"'^. If < 2*^ then there 
exists a fc-dimensional totally singular subspace S that 
satisfies e ^ S-^\S for all e £ 5^. Hence the achievable 
rate R satisfies 



l-R = \og2\£^\/n 

= log2 [3^'"(2L)] /n 
= 25\og2 3 + H2i2S). 



(17) 
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